PT-2023-21458 · Apple · Studio Display Firmware+1

Jzhu + 2 · Publicado 2023-05-08 · Atualizado 2023-07-27 · CVE-2023-27965

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.3 Studio Display Firmware versions prior to 16.4

Description A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges.

Recommendations For macOS versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue. For Studio Display Firmware versions prior to 16.4, apply the Studio Display Firmware Update 16.4 to fix the problem.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2023-27965

Produtos afetados

Studio Display Firmware

Apple Macos

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-27965 · Nota de Segurança
• https://support.apple.com/en-us/HT213672 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213670 · Aviso do Fabricante
• https://t.me/cibsecurity/63466 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27965 · Aviso do Fabricante